Visualisation with unique values

Elastic Stack Kibana
1

I have emails in my logs and I parse them like this:

"email:" "user1@gmail.com"
"name:" "user1"
"provider:" "gmail.com"

Now I want to make visualiation that will reflect unique providers in given timeframe, for example table like this:

"gmail.com"................................................. 343
"yahoo.com"..................................................134

That means each record in "343" is for unique email address in selected timeframe.

Can anybody help?

2

You can do this by creating a chart using a terms aggregation of field provider on the x axis and the unique count / cardinality aggregation on the email field for the metric.

3

@flash1293 Thanks. I would like to create one more where when I select week timeframe, I want to get unique provider per day, not the whole week. Lets say

Monday: user@gmail.com - 20 occurences in this day
Tuesday: user@gmail.com - 10 occurences in this day
Wendsday: troll@gmail.com - 10 occurences in this day

So the total for gmail.com in one week is 3 unique occurences regardless user@gmail.com is same for Monday and Tuesday. How can I do that?

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.